portal.easybank.at

- BAWAG P.S.K. Bank f Arbeit, Wirtschaft u Oest. Postsparkasse AG -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 41:0a:c1:8b:87:0c:d4:7e:62:77:46:92:92:00:fd:62 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BAWAG P.S.K. Bank f Arbeit, Wirtschaft u Oest. Postsparkasse AG

Organization: BAWAG P.S.K. Bank f Arbeit, Wirtschaft u Oest. Postsparkasse AG
Locality: Vienna
Country: AT

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 41:0a:c1:8b:87:0c:d4:7e:62:77:46:92:92:00:fd:62
Serial Number (int): 86455668254168961178963810017026833762
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 7d:6b:7c:7f:55:f3:be:bf:80:d8:b1:9a:e1:a8:90:d3:1d:d3:0d:ea
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 63:b0:39:a1:46:2d:60:9e:27:ed:54:4f:f5:95:48:f7:d9:d6:9d:58
Fingerprint (sha256): 26:64:e4:e0:8a:1e:e6:9e:f5:0f:71:fa:2f:dd:65:64:d5:2f:67:27:fe:b8:36:8b:e5:60:7c:50:d4:bc:9f:b0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate portal.easybank.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.easybank.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.easybank.at

Other certificates including the domain name easybank.at

(limited to 100 certificates)
rechner.easybank.at
securemail.easybank.at
www.easybank.at
service.easybank.at
owa.bawagpsk.com
cm6t.easybank.at
rechner.easybank.at
ssdc.easybank.at
easyapp-onboarding.easybank.at
rechner.easybank.at
3dsregister.easybank.at
intern.easybank.at
service.easybank.at
rechner.easybank.at
*.easybank.at
portal.easybank.at
service.easybank.at
*.easybank.at
ebanking.easybank.at
ssdc.easybank.at
rechner.easybank.at
fri3ndly-usr.easybank.at
www.easybank.at
cm6t.easybank.at
ebanking.easybank.at
www.easybank.at
ebanking.easybank.at
owa.bawagpsk.com
www.easybank.at
rechner.easybank.at
pebgtt.easybank.at
pebgtt.easybank.at
3dspayment.easybank.at
ebanking.easybank.at
ebanking.easybank.at
service.easybank.at
intern.easybank.at
securemail.easybank.at
www.easybank.at
www.easybank.at
ebanking.easybank.at
forms.easybank.at
www.easybank.at
rechner.easybank.at
easyapp-onboarding.easybank.at
ebanking.easybank.at
pebgtt.easybank.at
ssdc.easybank.at
cm6t.easybank.at
pebgtt.easybank.at
ebanking.easybank.at
ebanking.easybank.at
ssdc.easybank.at
ebanking.easybank.at
securemail.easybank.at
cm6o.easybank.at
cm8o.easybank.at
3dsregister.easybank.at
rechner.easybank.at
ebanking.easybank.at
rechner.easybank.at
zeichnen.easybank.at
service.easybank.at
rechner.easybank.at
owa.bawagpsk.com
forms.easybank.at
rechner.easybank.at
www.easybank.at
ssdc.easybank.at
securemail.easybank.at
3dsregister.easybank.at
ebanking.easybank.at
service.easybank.at
ebanking.easybank.at
cm6t.easybank.at
ssdc.easybank.at
intern.easybank.at
www.easybank.at
owa.bawagpsk.com
cm6t.easybank.at
ebanking.easybank.at
www.easybank.at
rechner.easybank.at
cm8o.easybank.at
newsletter.easybank.at
ebanking.easybank.at
ebanking.easybank.at
www.easybank.at
login.easybank.at
securemail.easybank.at
rechner.easybank.at
3dspayment.easybank.at
ebanking.easybank.at
pebgtt.easybank.at
ebanking.easybank.at
pebgtt.easybank.at
www.easybank.at
ebanking.easybank.at
cm10t.easybank.at
pebgtt.easybank.at

Certificate

The complete raw certificate details for portal.easybank.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pmHFftsxZOpWQw+z9+r
+d/SHP3u+camLQnZMTOm0qVVDi+C0KrBxiCI1YAycQ+YKqgvzKWr/2nC/AQBbwNF
zB1cHQohvyVNxamk4dcBXNHNznA9YoEok05/lwWuErR1C95oEGgAyZ4o7mmvTDHu
MjMpTLkn7OnovAPnzuUSYjh4BTENxsAuJoEo0lWkybhfR8y47orViQmz4G9vMz3j
43ciaeCX0YNgBrxNWML4B2Tr7dLaEZFJhTeXATEZhWux6jRqdh0jd/0Vp4EhHAIA
IJKaraTSWQSdm6kGTd76/pawTBBYW7PnreoQ7/B4q5THk3g1qdPhWykLs++5Rv3Y
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86455668254168961178963810017026833762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-28 09:18:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 09:18:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vienna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BAWAG P.S.K. Bank f Arbeit, Wirtschaft u Oest. Postsparkasse AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.easybank.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26585751363121830909056588558718093739924542604687145255572309727623820533477827371342537174615803930938977454832940427545661494533034359817980792198706689395746440678998510995381557892990552751941576358414183627076402438804142588177705322045826862642421271634443393503510243192647146521118854230374820311006924467401147721551392025580781379172802130559104302468315170287758909089817020349644558126481244747897060744910657588376964372507215406377638935430459463104690923003277843271280688169878367632447281775365012933213338421447901613952939987205356788683071443789658028080451030968483341316118131496710955541059653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d6b7c7f55f3bebf80d8b19ae1a890d31dd30dea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.easybank.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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